Who we are and applicable law
Kinnorae is an independently operated service based in Ontario, Canada. The operator of Kinnorae is responsible for the personal information under its control. Our privacy practices are governed by applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable. The Privacy Officer can be contacted at kinnoraesupport@gmail.com.
Information we collect
- Account information, such as your email address and profile display name.
- Card information, such as recipient names, occasions, messages, delivery dates, contribution settings, access-code settings, and publish status.
- Contribution information, such as contributor names, written messages, photos, videos, and voice notes.
- Payment information handled through Stripe. We receive payment status and related transaction identifiers, but we do not store full payment card details.
- Legal-policy acceptance records and a confirmation that a user or contributor is at least 18. We do not collect a date of birth solely for this confirmation.
- Feedback you choose to send through the app, including your account email if you request a reply.
How we use information
- To create, manage, contribute to, publish, and display group greeting cards.
- To authenticate users and protect card owner-only areas of the app.
- To process payments and upgrades through Stripe.
- To send account verification, password reset, and published-card notification emails.
- To prevent abuse, diagnose issues, improve reliability, and respond to support or feedback requests.
Who processes information
- Supabase (supabase.com/privacy) provides authentication, database, and media storage services for the app.
- Stripe (stripe.com/privacy) processes payments and performs payment-security and fraud-prevention checks.
- Resend (resend.com/legal/privacy-policy) may be used to deliver account, password reset, and card notification emails.
- Google Analytics 4 may process privacy-safe traffic, campaign, and product-funnel information when you accept optional analytics.
- Microsoft Clarity may process interactions on the public marketing homepage when you accept optional analytics. Private card and account routes are excluded.
- We do not sell personal information, and we do not use advertising pixels or cross-context behavioral advertising.
Cookies and similar technologies
We use essential cookies and local browser storage to keep you signed in, remember protected-card access, support payments, and retain limited first-party campaign and referral attribution. Optional Google Analytics and Microsoft Clarity storage is disabled until you accept analytics. We do not use advertising cookies or cross-site advertising profiles. Blocking essential storage may prevent sign-in, protected-card access, or payments from working correctly.
Your rights and choices
You have the right to access, correct, export, or delete the personal information we hold about you. You can update your account details in settings, delete your account from the app, or opt out of optional contributor notification emails at any time. To exercise any of these rights, contact kinnoraesupport@gmail.com.
Data retention
We keep account, card, contribution, payment-status, and notification information for as long as needed to provide the service, maintain published cards, comply with legal obligations, resolve disputes, and protect the app. Account deletion removes account-owned card data and associated contribution media according to the app's deletion flow.
Age requirement
This service is intended for users aged 18 and over. If you believe someone under 18 has provided us with personal information, contact kinnoraesupport@gmail.com and we will delete it promptly.
Changes to this policy
If we make material changes to this policy, we will notify signed-in users by email or via an in-app notice before the changes take effect. The “Last updated” date at the top of this page always reflects the most recent revision.
Still have a question?
We’re here to help with policy or account questions.